Overview
overview
6Static
static
6Ghost_Bust...NT.dmg
macos-10.15-amd64
Ghost Bust..._store
macos-10.15-amd64
1Ghost Bust...n.icns
macos-10.15-amd64
1Ghost Bust...ate#ps
macos-10.15-amd64
1Ghost Bust...e.macl
macos-10.15-amd64
1Ghost Bust...antine
macos-10.15-amd64
1Ghost Bust...bg.png
macos-10.15-amd64
1Ghost Bust...ate#ps
macos-10.15-amd64
1Ghost Bust...e.macl
macos-10.15-amd64
1Ghost Bust...ertags
macos-10.15-amd64
1Ghost Bust...antine
macos-10.15-amd64
1Ghost Bust...lp.txt
macos-10.15-amd64
1Ghost Bust...b7ynxa
macos-10.15-amd64
Ghost Bust...t:rsrc
macos-10.15-amd64
1Ghost Bust...T].dmg
macos-10.15-amd64
1Ghost Bust..._store
macos-10.15-amd64
1Ghost Bust...kgInfo
macos-10.15-amd64
1Ghost Bust...n.icns
macos-10.15-amd64
1Ghost Bust...ts.car
macos-10.15-amd64
1Ghost Bust...fo.xml
macos-10.15-amd64
1Ghost Bust...trings
macos-10.15-amd64
1Ghost Bust...trings
macos-10.15-amd64
1Ghost Bust...s.json
macos-10.15-amd64
1Ghost Bust...fo.xml
macos-10.15-amd64
1Ghost Bust...trings
macos-10.15-amd64
1Ghost Bust...trings
macos-10.15-amd64
1Ghost Bust...trings
macos-10.15-amd64
1Ghost Bust...trings
macos-10.15-amd64
1Ghost Bust...ate#ps
macos-10.15-amd64
1Ghost Bust...hgz4we
macos-10.15-amd64
1Ghost Bust...y:rsrc
macos-10.15-amd64
1Analysis
-
max time kernel
368s -
max time network
434s -
platform
macos-10.15_amd64 -
resource
macos-20231201-en -
resource tags
arch:amd64arch:i386image:macos-20231201-enkernel:19b77alocale:en-usos:macos-10.15-amd64system -
submitted
02/01/2024, 15:21
Behavioral task
behavioral1
Sample
Ghost_Buster_Pro_2_4_3_MAS_TNT.dmg
Resource
macos-20231201-en
Behavioral task
behavioral2
Sample
Ghost Buster Pro 2.4.3 MAS/.ds_store
Resource
macos-20231201-en
Behavioral task
behavioral3
Sample
Ghost Buster Pro 2.4.3 MAS/.VolumeIcon.icns
Resource
macos-20231201-en
Behavioral task
behavioral4
Sample
Ghost Buster Pro 2.4.3 MAS/.VolumeIcon.icns:com.apple.lastuseddate#ps
Resource
macos-20231201-en
Behavioral task
behavioral5
Sample
Ghost Buster Pro 2.4.3 MAS/.VolumeIcon.icns:com.apple.macl
Resource
macos-20231201-en
Behavioral task
behavioral6
Sample
Ghost Buster Pro 2.4.3 MAS/.VolumeIcon.icns:com.apple.quarantine
Resource
macos-20231201-en
Behavioral task
behavioral7
Sample
Ghost Buster Pro 2.4.3 MAS/.background/bg.png
Resource
macos-20231201-en
Behavioral task
behavioral8
Sample
Ghost Buster Pro 2.4.3 MAS/.background/bg.png:com.apple.lastuseddate#ps
Resource
macos-20231201-en
Behavioral task
behavioral9
Sample
Ghost Buster Pro 2.4.3 MAS/.background/bg.png:com.apple.macl
Resource
macos-20231201-en
Behavioral task
behavioral10
Sample
Ghost Buster Pro 2.4.3 MAS/.background/bg.png:com.apple.metadata__kmditemusertags
Resource
macos-20231201-en
Behavioral task
behavioral11
Sample
Ghost Buster Pro 2.4.3 MAS/.background/bg.png:com.apple.quarantine
Resource
macos-20231201-en
Behavioral task
behavioral12
Sample
Ghost Buster Pro 2.4.3 MAS/Help.txt
Resource
macos-20231201-en
Behavioral task
behavioral13
Sample
Ghost Buster Pro 2.4.3 MAS/Help.txt:com.apple.metadata_kmdlabel_dnftphl3a2xxyn2rmlkjb7ynxa
Resource
macos-20231201-en
Behavioral task
behavioral14
Sample
Ghost Buster Pro 2.4.3 MAS/Help.txt:rsrc
Resource
macos-20231201-en
Behavioral task
behavioral15
Sample
Ghost Buster Pro 2.4.3 MAS/Manual install/Ghost Buster Pro 2.4.3 MAS [TNT].dmg
Resource
macos-20231201-en
Behavioral task
behavioral16
Sample
Ghost Buster Pro 2.4.3 MAS/.ds_store
Resource
macos-20231201-en
Behavioral task
behavioral17
Sample
Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/PkgInfo
Resource
macos-20231201-en
Behavioral task
behavioral18
Sample
Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/AppIcon.icns
Resource
macos-20231201-en
Behavioral task
behavioral19
Sample
Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/Assets.car
Resource
macos-20231201-en
Behavioral task
behavioral20
Sample
Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/BaseKit_BaseKit.bundle/Contents/Info.xml
Resource
macos-20231201-en
Behavioral task
behavioral21
Sample
Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/BaseKit_BaseKit.bundle/Contents/R.strings
Resource
macos-20231201-en
Behavioral task
behavioral22
Sample
Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/BaseKit_BaseKit.bundle/Contents/R.strings
Resource
macos-20231201-en
Behavioral task
behavioral23
Sample
Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/BaseKit_BaseKit.bundle/Contents/Resources/mac-devices.json
Resource
macos-20231201-en
Behavioral task
behavioral24
Sample
Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Contents/Info.xml
Resource
macos-20231201-en
Behavioral task
behavioral25
Sample
Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings
Resource
macos-20231201-en
Behavioral task
behavioral26
Sample
Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings
Resource
macos-20231201-en
Behavioral task
behavioral27
Sample
Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings
Resource
macos-20231201-en
Behavioral task
behavioral28
Sample
Ghost Buster Pro 2.4.3 MAS/Ghost Buster Pro.app/Contents/Resources/CleanerKit_CleanerKit.bundle/Cont.strings
Resource
macos-20231201-en
Behavioral task
behavioral29
Sample
Ghost Buster Pro 2.4.3 MAS/Open Gatekeeper friendly:com.apple.lastuseddate#ps
Resource
macos-20231201-en
Behavioral task
behavioral30
Sample
Ghost Buster Pro 2.4.3 MAS/Open Gatekeeper friendly:com.apple.metadata_kmdlabel_mguxsx2wm2xfcldjqzv7hgz4we
Resource
macos-20231201-en
Behavioral task
behavioral31
Sample
Ghost Buster Pro 2.4.3 MAS/Open Gatekeeper friendly:rsrc
Resource
macos-20231201-en
General
-
Target
Ghost Buster Pro 2.4.3 MAS/Open Gatekeeper friendly:rsrc
-
Size
419KB
-
MD5
4db75a23fefe94e86abcaa5bdc667cb4
-
SHA1
4512e7ae3d1aef9fbf163b3c5bcf312aecbd99d2
-
SHA256
4dd4e4e755cb3f40250c3beca9392bc5f6dc0c2ebdf77ffcafc2a20f12f4299d
-
SHA512
a7dee1590512bd69d7b261e087860e4bb640be3dcd525fdb769483a2401b89be98cfd102bbda9571090ea64a9f634a57d188413a6aca414e5388962c1900006a
-
SSDEEP
12288:6SvvnqAC077fw5NlLC72sKsOzQVCJoMe+:7f7olG00VCJos
Malware Config
Signatures
Processes
-
/bin/shsh -c "sudo /bin/zsh -c \"/Users/run/Ghost Buster Pro 2.4.3 MAS/Open Gatekeeper friendly:rsrc\""1⤵PID:513
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Ghost Buster Pro 2.4.3 MAS/Open Gatekeeper friendly:rsrc\""1⤵PID:513
-
/bin/bashsh -c "sudo /bin/zsh -c \"/Users/run/Ghost Buster Pro 2.4.3 MAS/Open Gatekeeper friendly:rsrc\""1⤵PID:513
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/Open Gatekeeper friendly:rsrc"1⤵PID:513
-
/usr/bin/sudosudo /bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/Open Gatekeeper friendly:rsrc"1⤵PID:513
-
/bin/zsh/bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/Open Gatekeeper friendly:rsrc"2⤵PID:515
-
-
/bin/zsh/bin/zsh -c "/Users/run/Ghost Buster Pro 2.4.3 MAS/Open Gatekeeper friendly:rsrc"2⤵PID:515
-
-
/Users/run/Ghost/Users/run/Ghost Buster Pro 2.4.3 MAS/Open Gatekeeper friendly:rsrc2⤵PID:515
-
-
/Users/run/Ghost/Users/run/Ghost Buster Pro 2.4.3 MAS/Open Gatekeeper friendly:rsrc2⤵PID:515
-
-
/usr/libexec/xpcproxyxpcproxy com.apple.corespotlightservice.725FD30A-6064-6C02-CC51-5DDB8891B57E1⤵PID:557
-
/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService/System/Library/Frameworks/CoreSpotlight.framework/CoreSpotlightService1⤵PID:557
-
/usr/libexec/xpcproxyxpcproxy com.apple.spindump1⤵PID:559
-
/usr/sbin/spindump/usr/sbin/spindump1⤵PID:559
-
/usr/libexec/xpcproxyxpcproxy com.apple.diagnosticd1⤵PID:560
-
/usr/libexec/diagnosticd/usr/libexec/diagnosticd1⤵PID:560